Single firewall architecture with a single IP subnet

In the following diagram, a single firewall is placed under a WAN router and all traffic travels via this firewall. All servers are hosted on a single subnet and given equal security protection provided by the firewall, which provides isolation from the internet. A firewall having a single subnet may be justified when further isolation is not required between the servers and does not cause a significant risk:

Get Practical Network Scanning now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.